Verify your company domain

Verify that an email domain belongs to you (e.g. yourcompany.ch). After that, people with this domain join your tenant automatically, and you can set up sign-in with the company account (SSO).

For administrators only

You need administrator rights for the company account or the tenant.

Where to find it

my.actapass.com → Company accounts → ⋮ → Tenants → ⋮ next to the tenant → Domains

Tip

You need access to the DNS management of your domain (often at your hosting provider or your IT). If you use Microsoft 365 or Google Workspace, it also works without a DNS record: Connect Microsoft 365 or Google.

Add a domain

1. Click Add and enter the domain under Name.
2. actaPASS shows a TXT record: the name _actapass_domain_check and a value. Copy both with the icon next to them and add the TXT record in the DNS management of your domain.
3. Wait until the record is active (often minutes, sometimes hours), and click Verify. If it works, you see Verified on ….
4. Set the sign-in rules for addresses of this domain: Use password, Multifactor authentication and Max. sign-in attempts. At least a password or a second factor is required. Click Save.

You can only save once the domain is verified. If you see Unfortunately, the DNS record could not be found., the record is not visible yet; try again later.

What a verified domain does

• Anyone who signs up with an address of this domain or signs in through an identity provider automatically becomes a member of your tenant.
• People with this domain can no longer create their own company account.
• The sign-in rules apply to people who newly join through this domain. At sign-up, actaPASS sets up the password and second factor as the domain requires. Anyone who newly joins through an identity provider gets all three values in their membership. Existing members do not change; you set their values under Members.
• Only a verified domain assigns people.

Good to know

• actaPASS shows domains that were verified through Microsoft 365 or Google, but you can only change or delete them in actaSIGN under Microsoft 365 / Google.
• Under ⋮ → Identity providers, you set up sign-in with the company account for this domain.
• ⋮ → Delete removes the domain at once and for good.

See also

• Set up an identity provider (SSO)
• Connect Microsoft 365 or Google